CVE-2018-20348: Libpff Project Libpff

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a denial of service (infinite recursion) via a crafted file, related to libfdata_tree_get_node_value in libfdata_tree.c.

Affected products

• Libpff Project Libpff: before 20180714 (fixed in 20180714)

Published 2018-12-22. Last modified 2026-06-17.